ExamGecko
Search Search Login
Home Home / CompTIA / PT0-003
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

A penetration tester needs to evaluate the order in which the next systems will be selected for testing. Given the following output: Hostname | IP address | CVSS 2.0 | EPSS hrdatabase | 192.168.20.55 | 9.9 | 0.50 financesite | 192.168.15.99 | 8.0 | 0.01 legaldatabase | 192.168.10.2 | 8.2 | 0.60 fileserver | 192.168.125.7 | 7.6 | 0.90 Which of the following targets should the tester select next?
During a security assessment, a penetration tester needs to exploit a vulnerability in a wireless network's authentication mechanism to gain unauthorized access to the network. Which of the following attacks would the tester most likely perform to gain access?
A penetration tester gains initial access to a target system by exploiting a recent RCE vulnerability. The patch for the vulnerability will be deployed at the end of the week. Which of the following utilities would allow the tester to reenter the system remotely after the patch has been deployed? (Select two).
During a security audit, a penetration tester wants to run a process to gather information about a target network's domain structure and associated IP addresses. Which of the following tools should the tester use?
During a penetration test, a junior tester uses Hunter.io for an assessment and plans to review the information that will be collected. Which of the following describes the information the junior tester will receive from the Hunter.io tool?
A penetration tester needs to collect information over the network for further steps in an internal assessment. Which of the following would most likely accomplish this goal?
A penetration tester presents the following findings to stakeholders: Control | Number of findings | Risk | Notes Encryption | 1 | Low | Weak algorithm noted Patching | 8 | Medium | Unsupported systems System hardening | 2 | Low | Baseline drift observed Secure SDLC | 10 | High | Libraries have vulnerabilities Password policy | 0 | Low | No exceptions noted Based on the findings, which of the following recommendations should the tester make? (Select two).
Which of the following describes the process of determining why a vulnerability scanner is not providing results?
A penetration tester needs to launch an Nmap scan to find the state of the port for both TCP and UDP services. Which of the following commands should the tester use?
Which of the following tasks would ensure the key outputs from a penetration test are not lost as part of the cleanup and restoration activities?

Question 80 - PT0-003 discussion

Report
Export

A penetration tester is conducting a wireless security assessment for a client with 2.4GHz and 5GHz access points. The tester places a wireless USB dongle in the laptop to start capturing WPA2 handshakes. Which of the following steps should the tester take next?

A.
Enable monitoring mode using Aircrack-ng.
Answers
A.
Enable monitoring mode using Aircrack-ng.
B.
Use Kismet to automatically place the wireless dongle in monitor mode and collect handshakes.
Answers
B.
Use Kismet to automatically place the wireless dongle in monitor mode and collect handshakes.
C.
Run KARMA to break the password.
Answers
C.
Run KARMA to break the password.
D.
Research WiGLE.net for potential nearby client access points.
Answers
D.
Research WiGLE.net for potential nearby client access points.
Suggested answer: A

Explanation:

Monitoring Mode:

Definition: Monitoring mode allows a wireless network interface controller to capture all packets on a wireless channel, regardless of the destination.

Importance: This mode is necessary for capturing the four-way handshake required for WPA2 cracking.

Aircrack-ng Suite:

Aircrack-ng: A complete suite of tools to assess Wi-Fi network security. It includes tools for monitoring, attacking, testing, and cracking.

Enabling Monitor Mode: The specific tool used to enable monitor mode in Aircrack-ng is airmon-ng.

airmon-ng start wlan0

This command starts the interface wlan0 in monitoring mode.

Steps to Capture WPA2 Handshakes:

Enable Monitor Mode: Use airmon-ng to enable monitor mode.

Capture Handshakes: Use airodump-ng to capture packets and WPA2 handshakes.

airodump-ng wlan0mon

Pentest

Reference:

Wireless Security Assessments: Understanding the importance of monitoring mode for capturing data during wireless penetration tests.

Aircrack-ng Tools: Utilizing the suite effectively for tasks like capturing WPA2 handshakes, deauthenticating clients, and cracking passwords.

By enabling monitoring mode with Aircrack-ng, the tester can capture the necessary WPA2 handshakes to further analyze and attempt to crack the Wi-Fi network's password.

Show Answer
asked 02/10/2024
Sandesh Somaiah
39 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms